Actual Usernames?

The internet is a strange place, that’s for sure. Just take a look at some of the automated attacks that people launch.

Jun 11 09:42:29 freebsd sshd[72600]: Invalid user hitler from 218.69.96.250 Jun 7 09:10:28 freebsd sshd[50327]: Invalid user sunday from 212.230.5.215 Jun 7 09:10:29 freebsd sshd[50329]: Invalid user monday from 212.230.5.215 Jun 7 09:10:31 freebsd sshd[50331]: Invalid user tuesday from 212.230.5.215 Jun 7 09:10:32 freebsd sshd[50333]: Invalid user wednesday from 212.230.5.215 Jun 7 09:10:33 freebsd sshd[50335]: Invalid user thursday from 212.230.5.215 Jun 7 09:10:34 freebsd sshd[50337]: Invalid user friday from 212.230.5.215 Jun 7 09:10:35 freebsd sshd[50339]: Invalid user saturday from 212.230.5.215 Jun 7 09:11:48 freebsd sshd[50472]: Invalid user shit from 212.230.5.215 Jun 7 09:11:49 freebsd sshd[50474]: Invalid user more from 212.230.5.215 Jun 7 09:11:51 freebsd sshd[50476]: Invalid user less from 212.230.5.215 Jun 7 09:11:52 freebsd sshd[50478]: Invalid user grep from 212.230.5.215

Yes, obviously someone is feeding a dictionary into an brute force program, but shouldn’t there be a bit of discretion in which words are most likely to be actual user accounts?